SUSPICIOUS
34
Risk Score
Machine Learning
- Nyx PDF Classifier clean score 0.0405
Heuristics 3
-
PDF carries a PHP-gateway SEO-spam PDF link farm medium PDF_SEO_PHP_GATEWAY_LINK_FARMPDF contains four or more clickable links whose target is a `.php` gateway with a multi-word search-PHRASE document slug embedded after it (e.g. 'index.php?.../binary+options+trading+nz.pdf' or 'pdf.php/cialis-dosage-side-effects.pdf'). Legitimate PHP-served documents use a filename or numeric id, not a search-query phrase, so this is the generated SEO link-farm shape — pharma / binary-options / 'free download' spam that ranks for queries and routes users into payload/redirect chains. The PDF itself carries no exploit — the risk is the linked destinations.
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://dubaipropertyrentals.net/organizefree/carrydetermine.php/vlndlhbQmckGodv_bmG16217308ur.pdf PDF link annotation
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/mnheaboakPius16217649t.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/fQPznshufi16258767wwx.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/heuzfarebeGm16217441Qc.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/borntmffcmbfP_dmGkm16244865smdr.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/zhPbrJYzucebzeYnfrvecoa16258811rsrG.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/dea_vztwQdhYarv_lmneJof16217346h.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/QlblnaoPnsb_ah16244931Yfev.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/__usmahnheoaf16218180dvG.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/aiin16218008Yto.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/kxwJerzrtd16258823f.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/rQPmGldQ16244960drJd.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/davPGnQlnmotlnkoe16258880cm.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/sdzllYcbubdbonuiGPPcQPxJPG16258806ePn.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/lQelY16218000e.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/axPieJc16217752vtk.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/nxJvJ_GrkJoxthavPlcskuQYn16244790P.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/PtPaJQvfPnrYfznzQfiPklbJ16217598Pwnn.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/z_thullaakaceYvsGfwcGwr_i16258742ee_.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/hdctffe16217480h.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/ke_ffchvkcP16217731ds.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/J_fQlGrhhPbacxhmenszciwhfw_rz16217293h.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/hioYQvxPQitxllGQnorYfYQhne16244925ll.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/tQlQsl_aosaioJxtshYcade16217583wciv.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/dmvhuvwhxQtsPPrzvxvd__sma16217338bv.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/GGJQwrJlknwhPoim16217484P_Y.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/JnbcmtcGclz_G_JJh16217942d.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/JYlrfzfdQPY16217202tu.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/mQlle_vGtbmrtrezs16258797lYG.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/_Grr_JParJJidfrrouP16244831cfP.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/fdarkdPztJ16217340ddJ.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/smlJ_mQhftQxnvwxlb16217425_Px.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/lzedlldha16217748t.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/crvYklsuaswekJtr_z16217576ok.pdfIn PDF document text
- http://www.asconbs.dk/asc/awxPJc16128405fe.pdfIn PDF document text
- http://www.kamilciepienko.pl/moneystop/riulxPd15480809sd.pdfIn PDF document text
- http://www.kryonbrasil.com.br/departmentremain/raelJhmcreJQfdl15464166rho.pdfIn PDF document text
- http://alistatrans.ru/astech/mcQnusndovwlbciwtQni11758410suv.pdfIn PDF document text
- http://stripvip.com/release/oxenQPnhczQmwt_YYftcxrdfYmze12016072z.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/uxvzmov_dt_tds16258696Q.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/skPcvfdultPu16244948YYnG.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/J_YY_vumbQfsaPr_arr16258746w.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/tmGzewJ_16244953ntvo.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/wGwvvoJ16217655Jd.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/zJeckmkdduzsfikPeaecwawazJdbvf16218032Jc_.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/fh_PnGvQohzdrQtnPschc16244935_heG.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/_swrmd16217460falY.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/hzzkxsGcJwaJhPeYhrYlPllYvhcaPJ16218037ocd.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/GrQsfrzfoeQoubdlPsbz16217640_.pdfIn PDF document text
- http://dubaipropertyrentals.net/organizefree/carrydetermine.php/iuJxQbYxGdfdnPnoJodffJsYbwlfw16217394s.pdfIn PDF document text
+27 more URL(s)
Extracted artifacts 3
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_004_off0000b93b.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0xB93B | 20040 bytes |
SHA-256: fb575ad495fadcfa65634f19829b2801de6283e9c06b6dc1f73a66915348fe6a |
|||
font_01_sfnt_off0000ef70.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xEF70 | 19964 bytes |
SHA-256: 5154a7c8cf7a9b55c2f939ad6a4a8f8327cd6552b9f68a87c49d10dfc747eaa8 |
|||
font_02_sfnt_off00012535.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x12535 | 20828 bytes |
SHA-256: 66ee5a421be874c2bf64758e212dcdc74f7e5fbd5b562db26553446e87a084f1 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.